Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/JSXAJ8JZDD76Xm4X8hQXcdRefe4.roa
File: JSXAJ8JZDD76Xm4X8hQXcdRefe4.roa (raw, json)
Hash identifier: x6ebz9ETwSba++RP3d6vSd6eV11euGoS7IyVYS3sfZw=
Subject key identifier: 25:25:C0:27:C2:59:0C:3E:FA:5E:6E:17:F2:14:17:71:D4:5E:7D:EE
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019CB1649E31B1C4936AF9C211057DD33A34
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/JSXAJ8JZDD76Xm4X8hQXcdRefe4.roa
Signing time: Tue 03 Mar 2026 01:51:27 +0000
ROA not before: Tue 03 Mar 2026 01:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201392
IP address blocks: 2a06:9801:17::/48 maxlen: 48
2a06:9801:f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:64:9e:31:b1:c4:93:6a:f9:c2:11:05:7d:d3:3a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Mar 3 01:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2525c027c2590c3efa5e6e17f2141771d45e7dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6b:ff:91:2d:50:32:3d:90:0e:51:d4:38:58:
03:b1:e0:11:2c:50:df:c4:2d:df:d6:2d:35:cf:ee:
42:68:24:45:70:38:06:3c:ae:5f:64:51:92:5e:81:
52:d9:57:c6:3a:9d:50:b0:bd:ef:b7:7b:72:f1:00:
2a:50:f4:0d:1b:1b:53:d4:21:d8:6d:4e:de:b6:c3:
29:20:d9:a4:02:ec:af:62:40:55:fd:9d:61:30:a6:
8d:ca:35:77:27:4d:34:f3:7f:94:90:e4:a2:32:3e:
48:39:f9:0d:a0:1a:af:f7:ca:0a:68:c2:ef:81:be:
8e:85:4c:20:9e:a0:73:d7:dd:6c:3e:b1:f8:86:1d:
aa:68:40:28:98:59:78:8d:54:f5:68:e5:7f:e0:74:
e1:f2:87:6e:93:2a:e9:e7:e4:43:75:36:2f:16:c0:
8a:b1:5e:01:ab:15:5c:12:fc:6d:da:e7:74:52:a7:
11:f0:ad:ea:00:75:24:86:16:81:a9:4c:c4:ff:3f:
7b:08:75:7a:48:86:fd:34:67:94:43:0d:09:a0:8c:
4a:04:77:5e:00:2c:04:1d:75:91:35:b6:00:5d:3c:
f9:e0:2d:61:7a:df:2c:d9:b2:2b:5c:1b:71:32:78:
86:4f:58:75:ff:36:3d:c2:00:4f:28:63:da:23:13:
13:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:25:C0:27:C2:59:0C:3E:FA:5E:6E:17:F2:14:17:71:D4:5E:7D:EE
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/JSXAJ8JZDD76Xm4X8hQXcdRefe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:17::/48
2a06:9801:f0::/44
Signature Algorithm: sha256WithRSAEncryption
3a:5b:c1:17:55:58:46:5e:7b:b2:f0:dd:66:ba:d1:47:e3:2b:
16:61:70:64:c6:33:89:5c:7b:43:52:f0:63:0e:70:fd:ec:76:
f4:78:92:6e:2f:68:f5:a4:74:39:01:39:e4:2e:e6:9d:18:61:
32:00:ea:71:88:df:d3:e7:6d:e2:2e:d2:09:ef:6d:72:85:3a:
db:35:bf:4a:2b:ce:82:ca:ea:60:a2:7e:34:1d:9d:5a:92:a2:
3d:d3:fd:66:5b:75:74:e6:e8:21:d9:8e:aa:90:ff:f3:a1:2a:
96:8b:d1:29:0c:68:56:25:54:fe:03:d1:41:77:ed:82:40:40:
4a:a6:a7:3f:31:6d:b9:07:e7:43:ff:bd:b4:0b:c5:60:09:e1:
4f:f4:86:ed:59:a8:a9:6e:5f:9a:bf:bf:4c:91:96:a3:98:4e:
9a:82:60:62:61:a3:f8:70:fb:50:38:f0:64:63:a9:b8:b5:bd:
82:ed:2e:41:5b:67:7f:7a:b1:c6:fc:c2:da:4e:97:3d:41:32:
14:d6:73:cb:4b:51:7d:64:6c:17:a2:e7:63:1d:e9:ac:75:55:
5c:b6:68:14:57:ad:d7:94:3b:a9:a3:36:6e:38:63:af:91:8f:
86:07:03:bb:36:5b:c3:55:84:c6:3e:83:25:7b:d2:a8:0a:f0:
30:7a:c2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:43 2026 by rpki-client